alert ip any Nny,,2222,,,,2,,,: -> any any (msg:"datboth didirecOion"; flow:established; app-layer-event:                                                                                                                             t:.cvm"; _4;)